2

Microsoft tests Super-Duper Secure Mode for Edge

 3 years ago
source link: https://www.zdnet.com/article/microsoft-is-testing-a-super-duper-secure-mode-for-its-edge-browser/
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
neoserver,ios ssh client
Microsoft tests Super-Duper Secure Mode for Edge

By Mary Jo Foley for All About Microsoft | August 5, 2021 -- 15:14 GMT (23:14 SGT) | Topic: Security

microsoft-edge.jpg

(Image: Shutterstock)

Microsoft's Edge Vulnerability Research (VR) team is testing a new feature they've christened, "Super Duper Secure Mode" (SDSM). Super-Duper Secure Mode is all about making Edge more secure without negatively impacting performance.

SDSM works by removing Just-In-Time compilation from the V8 processing pipeline, which will reduce the attack surface that can be used to hack into Edge's systems, as Bleeping Computer (where I first saw the SDSM information) explains. In addition to disabling the JIT, SDSM enables "new security mitigations" to make Edge a more secure browser.

"JavaScript plays a key role in any browser story. JITs exist for a reason, and that is to optimize JavaScript performance," the Microsoft browser researchers noted in their August 4 blog post about SDSM. However, so far, the researchers said they don't see much of a change in performance with JIT disabled; most of their tests remained unchanged.

By disabling the JIT, roughly half of the V8 bugs that must be fixed would be removed. This would mean less frequent security updates and fewer emergency patches for users, the researchers noted.

SDSM is still considered to be in the experimental stage. Still, Edge preview testers -- in the Canary, Dev and Beta rings -- can enable it now with a flag by going to edge://flags/#edge-enable-super-duper-secure-mode and turning on the new feature.

By Mary Jo Foley for All About Microsoft | August 5, 2021 -- 15:14 GMT (23:14 SGT) | Topic: Security


About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK